Services · Sustainability

Internal Control Adoption and Self-Assessment Toolkit

ICF04

Provides tools for control self-assessment, control-owner attestations, issue tracking, management review and periodic refresh of the internal control framework.

What changes

Improved ongoing control monitoring, earlier identification of control breakdowns and stronger sustainability of the control framework.

What you get

  1. Control self-assessment toolkit and cycle ICF011
  2. Control-owner attestation form ICF012
  3. Control issue and remediation tracker ICF013
  4. Management review and framework refresh template ICF014

What has to come first

Who is involved

From the National Society's side. This is what the engagement asks of your people.

Your own staff work alongside the adviser throughout, so this is a commitment of their time as well as the Centre's. Ask in the request and you are given the day estimate per role before anything is signed.

RoleWhat they do
HNS Finance DirectorOwns the control framework upkeep
HNS control owners across financeAttest and self-assess
HNS Secretary General and senior managementReview results
HNS Board / Audit & Risk CommitteeOversight of control health
HNS internal audit functionUses self-assessment to focus testing, where it exists
GFDC delivery teamDrafts and advises

How it is measured

IndicatorTargetEvidence
Self-assessment toolkit approved and first cycle run Within 7 weeks of kick-off Approval record; first self-assessment results
Control owners completing attestations each cycle 100% of control owners Attestation forms
Self-assessment exceptions with remediation owner and date 100% of exceptions Issue and remediation tracker
Management review of results each cycle Every cycle Management review record

Tools

4 of 4 ready to download.

  • ICF011 Control self-assessment toolkit and cycle Template DOCX
  • ICF012 Control-owner attestation form Template DOCX
  • ICF013 Control issue and remediation tracker Template XLSX
  • ICF014 Management review and framework refresh template Template DOCX

Standards

  • COSO Internal Control - Integrated Framework
  • COSO Enterprise Risk Management (ERM) Framework
  • IFAC guidance on internal control

Describe the problem, not the service

You do not need to know which of the 124 to ask for.